+-  Allow collectd to read hardware state information
    +- Add loop_control_device_t
    +- Allow mdadm to request kernel to load module
    +- Allow domains that start other domains via systemctl to search unit dir
    +- systemd_tmpfiles, needs to list any file systems mounted on /tmp
    +- No one can explain why radius is listing the contents of /tmp, so we will dontaudit
    +- If I can manage etc_runtime files, I should be able to read the links
    +- Dontaudit hostname writing to mock library chr_files
    +- Have gdm_t setup labeling correctly in users home dir
    +- Label content unde /var/run/user/NAME/dconf as config_home_t
    +- Allow sa-update to execute shell
    +- Make ssh-keygen working with fips_enabled
    +- Make mock work for staff_t user
    +- Tighten security on mock_t